This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.

Known Bugs

On bug reporting

/!\ Please don't add new bugs here, ask the developer/user mailing lists or use our [http://bugs.ethereal.com/bugzilla/ bugzilla] for this purpose.

For several reasons, a Wiki isn't a good way to handle bugs, e.g. how to ask questions to a new bug if no mail address was left.

New bugs added to this page will be deleted without further notice!

Not a Bug

Things our users frequently notify as bugs, but which are intended behaviour.

  1. The horizontal scrollbar in the packet list pane wasn't removed. It does automatically appear if the content doesn't fit into the window. If you widen your columns to be larger than the pane, a scrollbar will appear. You can also use View/Resize All Columns for this.
  2. Plugins are not portable between versions. Ever wondered why Ethereal keeps its plugins in a directory named after its version? That is because the plugin interface is considered an internal interface to Ethereal. Therefore it is not stable (as API and ABI) and can change with every version. So when moving from one version to the next you get a fresh install of plugins for this version. When using a 3rd party plugin, request a fresh build from the supplier.
  3. The Ethereal Windows version (as well as some other windows software) won't work well with desktop theme software, e.g. making the windows desktop look like Mac OS X. Known problems are with Alienware's Windows theme (AlienMorph(TM)?) not showing the packet list well.

  4. ICMP packets appearing when filtering for other ip based protocols. Some ICMP packets sometimes contain the packet that "caused the error" and this is going to be dissected. if you dont want to have the frames that are icmp but contain udp use "udp && ! icmp" instead of "udp" as filter.

Files not accessible

In Ethereal 0.10.14 a new version of GTK is being used. This version 2.6 has the tendency not to work well with non-US installations of operating systems, specifically with regards to UNICODE characters in path names. This leads to all kinds of errors while accessing files. [http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=648 bugreport 648] has been entered into bugzilla regarding this case.

In the mean time the workaround is to rollback to using Ethereal 0.10.13. This option may not be desireable for several reasons, therefore the intention is to solve this issue.

Running Out Of Memory -> Terminate

Ethereal will terminate if it runs out of memory. There's currently no solution to this, for details and workarounds see the /OutOfMemory page.

Packet List Vertical Scrollbar

The vertical scrollbar of the packet list sometimes doesn't show up or is otherwise strange, due to a probable bug in the GTK+ toolkit. Simply resizing the Packet List (by moving the seperator bar) usually solves this problem.

Sniffer Time Stamps

Time stamps in capture files from the Windows version of Sniffer are not always interpreted correctly.

If you have a problem with time stamps in Sniffer files, try it with the latest Ethereal release. If you still have a problem with it, please add a new [http://bugs.ethereal.com/bugzilla/ bugzilla] bug and give us a copy of a capture file with the problem, and a listing of what the time stamps on the packets should be, if possible.

Discussion